deps: Update dependency dotenv to ^18.0.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dotenv	^18.0.1 → ^18.0.4

---

Release Notes

motdotla/dotenv (dotenv)

v18.0.4

Compare Source

Changed

• import dotenv/config should default quiet: true (#​1063)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 12pm on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Error: ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION

  × installing dependencies
  ╰─▶ 4 lockfile entries failed verification:
        @vitest/coverage-v8@5.0.2 was published at 2026-09-25T08:58:03.000Z,
      within the minimumReleaseAge cutoff (2026-09-24T22:37:42.280Z)
        @vitest/mocker@5.0.2 was published at 2026-09-25T08:57:30.000Z, within
      the minimumReleaseAge cutoff (2026-09-24T22:37:42.280Z)
        @vitest/spy@5.0.2 was published at 2026-09-25T08:57:18.000Z, within
      the minimumReleaseAge cutoff (2026-09-24T22:37:42.280Z)
        vitest@5.0.2 was published at 2026-09-25T08:57:59.000Z, within the
      minimumReleaseAge cutoff (2026-09-24T22:37:42.280Z)
  help: The lockfile contains entries that the active policies reject. This
        can mean the lockfile is stale, or that someone committed a lockfile
        that bypassed the policy locally — inspect recent changes to pnpm-
        lock.yaml before trusting it. If the changes look expected, run "pnpm
        clean --lockfile" and then "pnpm install" to rebuild from a fresh
        resolution. Alternatively, relax the policy that flagged them.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: e3bc6e40-e60c-4efd-967d-fb191b5f9967

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}